Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/eioZeK2ixk1fknBFHsEIC0XiMXc.roa
File: eioZeK2ixk1fknBFHsEIC0XiMXc.roa (raw, json)
Hash identifier: zUI6XVeAGKBuMAQooU83Yy0h0UAiQ/2m8AyQjWIpTDk=
Subject key identifier: 7A:2A:19:78:AD:A2:C6:4D:5F:92:70:45:1E:C1:08:0B:45:E2:31:77
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018AFA6A8101B1128841B1077C4711E44BA0
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/eioZeK2ixk1fknBFHsEIC0XiMXc.roa
Signing time: Wed 04 Oct 2023 11:19:58 +0000
ROA not before: Wed 04 Oct 2023 11:19:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207046
IP address blocks: 185.247.4.0/22 maxlen: 24
194.113.28.0/22 maxlen: 24
185.247.5.0/24 maxlen: 24
185.247.6.0/23 maxlen: 24
194.146.220.0/22 maxlen: 22
185.224.220.0/22 maxlen: 22
178.212.225.0/24 maxlen: 24
185.221.16.0/23 maxlen: 23
185.227.206.0/24 maxlen: 24
45.134.84.0/22 maxlen: 24
185.227.207.0/24 maxlen: 24
185.249.204.0/22 maxlen: 22
185.250.182.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fa:6a:81:01:b1:12:88:41:b1:07:7c:47:11:e4:4b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 4 11:19:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a2a1978ada2c64d5f9270451ec1080b45e23177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f6:36:bd:13:bd:fd:67:60:e8:15:84:ae:e3:
67:fa:d0:fe:54:ec:88:92:8b:18:b4:41:20:06:c1:
b6:46:81:6f:eb:70:77:47:86:40:38:1b:4c:ac:f1:
5e:ca:17:73:6c:7b:76:6a:ec:f9:0c:19:37:03:c3:
9e:e8:14:7a:bf:5b:3b:9c:f8:e2:59:a8:3c:6c:5c:
dc:a2:21:16:f0:5c:27:c4:41:1a:02:28:21:71:48:
a4:7a:c9:29:62:b1:b9:c3:9b:92:cd:9d:f1:6b:31:
fe:c8:39:6b:16:ae:2a:dc:66:c8:c3:82:87:b1:65:
ee:64:8d:dc:6b:a8:6c:71:be:f4:88:b0:e0:b2:ff:
a4:3a:cd:bc:fa:77:38:36:1b:fd:77:78:89:50:7c:
ab:9a:6c:44:d4:3b:2e:ac:42:43:22:79:b0:6a:42:
bd:28:88:5c:33:47:83:ee:3c:31:bc:9f:b6:ee:4c:
97:f7:bc:0a:30:d5:9c:75:b3:54:b0:c8:f8:a6:0e:
70:e8:1f:c7:8a:c3:bc:36:c9:22:c8:57:b5:1a:2d:
21:48:99:ab:b6:4b:7f:53:29:df:eb:cb:59:c8:5f:
7d:73:c3:ab:9a:9f:e2:c9:60:3f:17:a9:53:09:25:
90:6d:6d:60:9f:a6:8f:28:48:6d:79:c9:bb:fe:d4:
f8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2A:19:78:AD:A2:C6:4D:5F:92:70:45:1E:C1:08:0B:45:E2:31:77
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/eioZeK2ixk1fknBFHsEIC0XiMXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.84.0/22
178.212.225.0/24
185.221.16.0/23
185.224.220.0/22
185.227.206.0/23
185.247.4.0/22
185.249.204.0/22
185.250.182.0/23
194.113.28.0/22
194.146.220.0/22
Signature Algorithm: sha256WithRSAEncryption
96:f6:57:f5:e9:32:61:bc:aa:65:69:0b:6b:17:b7:7a:7c:4b:
92:f2:69:6e:53:2b:a2:1e:3b:37:5e:8a:9a:6c:ad:ef:f1:1d:
48:1d:61:f8:3f:76:e4:3a:4f:e1:a9:7f:30:bc:c4:42:1d:a3:
6e:cf:17:23:1c:ee:bc:f7:41:02:1e:21:7d:95:c0:bd:90:c6:
a5:dc:96:db:3f:9c:da:d8:d8:a0:89:57:62:f5:84:6a:42:3f:
98:9b:58:fc:10:4e:30:81:e7:1c:af:26:7f:32:8f:fb:19:eb:
ef:61:1e:34:5c:7d:14:cc:3d:66:ca:6b:23:bf:ea:a2:91:4c:
85:fd:54:9d:97:3a:0d:6e:4f:0f:66:05:28:10:25:32:0d:4e:
9d:15:c3:f2:4c:e9:a7:8b:de:7a:11:65:25:5a:82:fa:80:d7:
a5:cf:22:70:47:9b:3c:96:93:6e:51:f1:66:80:8c:e3:df:50:
ef:ea:77:5f:91:a8:f6:ef:84:4b:0a:2f:cb:d4:7e:e0:65:75:
20:e8:1e:35:c3:07:75:e4:49:91:9a:be:78:18:4d:06:f6:28:
b5:26:d8:08:9c:1d:d4:c8:0b:0b:64:a3:11:f9:4e:aa:cc:6b:
2b:9d:ec:0c:f3:b1:98:2d:c1:b9:7d:b6:2b:70:be:ff:12:46:
30:8c:77:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org